Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

RegLimited

v1.0.1

Vehicle restriction query and reminder tool for Chinese cities. Query daily restrictions and set scheduled reminders.

0· 418·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the code: it queries Beijing restrictions (online or fallback) and stores reminders. No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md advertises multi-city online queries and notify-channel options (Feishu/Telegram). The code only performs online fetching for Beijing and does not implement any notification delivery or a --notify-channel flag (handleAdd ignores notify-channel). The CLI reads/writes ~/.reg-limited/config.json (process.env.HOME) — this is expected for reminders but not documented in SKILL.md.
Install Mechanism
No install spec (instruction-only packaging) and included code is a small Node.js CLI. Nothing downloads or extracts arbitrary remote archives during install.
Credentials
The skill declares no environment variables or credentials and only reads HOME to store a local config file. It does call an external agent tool (openclaw tools web_fetch) via execSync but does not request secrets.
Persistence & Privilege
always:false and the skill is user-invocable. It writes a config file to the user's home (~/.reg-limited/config.json) for reminders, which is proportionate to its purpose but is persistent local state the user should be aware of.
What to consider before installing
What to consider before installing: - Functionality vs reality: The README/skill doc mentions notification channels and broader multi-city online queries, but the bundled code only fetches Beijing data and does not implement sending notifications or a --notify-channel option. Expect feature gaps. - Local files: The CLI creates and updates ~/.reg-limited/config.json to store reminders. If you install, inspect that file and its contents before trusting persisted reminders. - External command execution: The code runs a shell command via child_process.execSync: `openclaw tools web_fetch --url ...`. That delegates web fetch to the agent's tool. This is not a secret exfiltration on its own, but it means the skill relies on (and will trigger) a platform tool — verify you trust the platform's web_fetch implementation and that it won't leak sensitive data. - Bugs present: The source contains at least one stray/commented line that breaks control flow and duplicated logic; the HTML parsing is brittle. The program may fail or fall back to hard-coded rules unexpectedly. Recommended steps: 1) Review the bundled bin/reg-limited.js source yourself (or in a sandbox) and run it in an isolated environment first. 2) If you need notification delivery, either implement/verify that feature or avoid using the advertised --notify-channel until it's actually supported. 3) Confirm you are comfortable with the CLI writing to your HOME directory. Back up/remove ~/.reg-limited before testing. 4) If you want to proceed in production, ask the author for a corrected release that documents where reminders are stored and implements/omits the notify-channel option consistently.

Like a lobster shell, security has layers — review code before you run it.

carvk971tkj04h5fyvxtd0rz0swg3d81tccdlatestvk978797jja8fp5x8kpnme1dams826d40licensevk971tkj04h5fyvxtd0rz0swg3d81tccdplatevk971tkj04h5fyvxtd0rz0swg3d81tccdrestrictionvk971tkj04h5fyvxtd0rz0swg3d81tccd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments